Data Protection Act

Need; DPA Questions x13 Bite size Video Poster DPA Flash Cards

Riddle – What am I? What can you hold without ever touching or using your hands? Your breath. Clue

Today’s Lesson.. Data Protection Act (1998) What Data is stored? Watch a short video; Gain information; Create a poster; Present the poster to the class.

Data protection Act (1998) Unit 3 – L.O 2: Understand the issues related to the use of information. P3 – Explain the issues related to the use of information. M2 – Assess how issues related to the use of information affect an organisation.

Who stores data about you?

Information stored by kitchen staff Name Finger print Date of birth School year Home address Home phone number Money left on your account What’s good about using finger prints?

Fast access to your information Benefits Drawbacks Fast access to your information Needs a database to hold the information They know your history Information must be regularly updated or it could be wrong There is less risk of things being missed or mistakes being made Needs employees to actually input the information Your account balance can be updated quickly Needs security measures to be in place You don’t have to remember your information

Data Protection Act (1998) What is the Data Protection Act (1998) and why was it created? What are the eight principles of the Data Protection Act? Data Protection Act: What rights do we have? What is an Information Commissioner, Data Controller and Data Subject? Are there any exemptions to the Data Protection Act?

Bite size video http://www.bbc.co.uk/schools/gcsebitesize/ict/legal/0dataprotectionandmisuse_act.shtml

Data Protection Act (1998) What is it and why was it created? The Data Protection Act (DPA) is a law designed to protect personal data stored on computers or in an organised paper filing system. It was created to protect individuals from misuse of this data.

Data Protection Act (1998) What are the eight principles of it? Data must be kept secure; Data stored must be relevant; Data stored must be kept no longer than necessary; Data stored must be kept accurate and up-to-date; 5. Data must be obtained and processed lawfully; 6. Data must be processed within the data subject rights; 7. Data must be obtained and specified for lawful purposes; 8. Data must not be transferred to countries without adequate data protection laws.

Data Protection Act (1998) What is an Information Commissioner, Data Controller and Data Subject? Information Commissioner: Person who has the power to enforce the Act. Data Controller: Person or Company that collects and keeps data about people. Data Subject: Person who has data about them stored outside their direct control.

Data Protection Act (1998) What rights do we have as data subjects? To be supplied with the data held about us; To change incorrect data; To prevent data being used about us if it will cause distress; To stop data being used in attempts to sell us something; To use the law to gain compensation.

Types of Personal data Some data and information stored on a computer is personal and needs to be kept confidential. People want to keep their pay, bank details, and medical records private and away from the view of just anybody. If someone who is not entitled to see these details can obtain access without permission it is unauthorised access. The Data Protection Act sets up rules to prevent this happening.

Types of Personal data Personal data is about living people and could be Sensitive data is also about living people, but it includes one or more details of a data subject's Their name Racial or ethnic origin Address Political opinions Medical details Religion Banking details Membership of a trade union Health Criminal activity

Data Protection Act (1998) Are there any exemptions to the Data Protection Act? Any data held for National Security reasons e.g. MI5 Police can access personal information in order to solve crimes. The taxman can access personal information to ensure people pay their tax! Any data held for domestic purposes at home e.g. birthday lists, address books.

Registration with the Information Commissioner Any organisation or person who needs to store personal information must apply to register with the Information Commissioner. Data controllers must declare what information will be stored and how it will be used in advance. This is recorded in the register.

Each entry in the register contains: The data controller's name and address. A description of the information to be stored. What they are going to use the information for. Whether the data controller plans to pass on the information to other people or organisations. Whether the data controller will transfer the information outside the UK. Details of how the data controller will keep the information safe and secure

Data Protection PPT – Slides 3+5

Task – DPA (1998) Using the notes you have made; create a poster targeted at ICT pupils aged 14 – 16. A4 Use Bold for important words Different fonts. Large text Easy to read Have a theme Make the important information clear! Add images

Plenary Flash Cards